Proofpoint Security

I have been working with Proofpoint Enterprise DLP for the last 10 years.

Proofpoint Enterprise DLP uses an information system with keywords and Regex as a form of pattern matching, making it very secure. Proofpoint Enterprise DLP is especially specialized for emails. If you are sending any mail with sensitive information, such as PHI or SSN numbers, it will detect and block them according to your configured conditions and send a notification to the admin. Proofpoint Enterprise DLP is designed for considering DLP only for email communication, whether inbound or outbound.

Proofpoint Enterprise DLP uses keywords on a keyword basis and Regex, which we configure. The best feature is that when you compare Proofpoint Enterprise DLP to other solutions, if you put conditions very efficiently, Proofpoint Enterprise DLP completely follows the rules which you have configured and applies them properly. Proofpoint Enterprise DLP restricts communications in this way. The second thing is that Proofpoint Enterprise DLP works on a behavioral basis as well. For example, if I usually send two or three emails every day, but suddenly I am sending more than 10 or 15 emails, then Proofpoint Enterprise DLP's behavior detection will start to quarantine the messages.

Data risk is always present. As an admin, we communicate regularly that any data breach should not happen. If any PHI information or something sensitive is being sent, the sender should contact their manager. We have created specialized groups where group members can only send DLP things with an exception. We have made one proper group for finance since they are sending some critical things, and group members who follow the configured conditions are able to send the information outside.

Proofpoint Enterprise DLP is very important because we operate in the aviation sector where many critical things are involved. We have made two layers of security with Microsoft and Proofpoint Enterprise DLP. Proofpoint Enterprise DLP analysts and architects in the backend give us a meeting every month where they explain how many attacks came into our organization, what passed through, what major things we need to do, and how to fix them. This extended support from Proofpoint Enterprise DLP is invaluable.

Proofpoint Enterprise DLP needs to focus on another area as well. For example, someone might want more security for shared drives and OneDrive. There might need to be some API connectors in the future. I think Proofpoint Enterprise DLP needs to do more work on this side.

Until now, we have not experienced any high severity issues. Proofpoint Enterprise DLP's response time for any very high severity issue is within 30 minutes, and an engineer will join the call. For normal issues, they are replying within one to two hours on all matters. This support response is acceptable, and they are providing good support.

If you want to scale more, Proofpoint Enterprise DLP can handle that. This is not a big challenge.

Support is excellent. Whenever you need to configure Proofpoint Enterprise DLP for the first time, you have to contact Proofpoint Enterprise DLP support. A technical account manager will be assigned to you, and they will assign some engineers during configuration to observe the process. Proofpoint Enterprise DLP consultants are also provided who help in the security domain and analyze the monthly details about attacks and what needs to be done.

The setup is very straightforward and not hectic. It is simple.

We have one particular licensing team that directly contacts Proofpoint Enterprise DLP. They manage all the details by negotiating what can be configured and what additional features Proofpoint Enterprise DLP can provide.

Proofpoint Enterprise DLP is a little bit costly compared to other tools available in the market. Proofpoint Enterprise DLP pricing starts on a per user basis, from $2 to up to $8 or $10 per user depending on the features you need.

For other organizations, it depends on what their criticality requirements are. Every organization has different needs. For example, if someone is using a normal travel business, email security is definitely required for everyone, but not at the level of a finance organization. If they really want to concern themselves about security, they can recommend Proofpoint Enterprise DLP. However, they can use different platforms as well because multiple alternatives exist. Mimecast is cheaper than Proofpoint Enterprise DLP. Proofpoint Enterprise DLP can be compared to choosing an iPhone. For example, both iPhone and Android exist, but some people prefer iPhone devices only. Similarly, Proofpoint Enterprise DLP stands out in a security prospect. Microsoft is cheaper than Proofpoint Enterprise DLP because Microsoft provides a package with E5 licensing and provides everything as a bundle.

My core area of expertise is Proofpoint Enterprise DLP and Microsoft security. We provide user guides for normal users and conduct training from time to time, especially for DLP and phishing on email. Proofpoint Enterprise DLP is configured in the backend as we work as admins and determine what protections we require. If you are really considering using Proofpoint Enterprise DLP, based on my analysis, Proofpoint Enterprise DLP is used by organizations that want to do very critical things and do not want to compromise on security at any cost. Therefore, they prefer Proofpoint Enterprise DLP. If it is a normal organization, they can use different tools such as Mimecast or Microsoft Defender. However, an organization that has very critical things, such as in the banking sector, should consider Proofpoint Enterprise DLP. From an email perspective, it is excellent. Currently, Proofpoint Enterprise DLP is probably using version 8.22.20, and 98% of organizations are using the web-hosted option. Proofpoint Enterprise DLP provides two deployment models: server-based and web-hosted based. They keep updating continuously, so there is no need to worry about maintenance, only about configuration and protection. I have given this review a rating of 10.

Proofpoint Enterprise DLP is deployed in my infrastructure. I have experience with several policies for Proofpoint Enterprise DLP, such as Prime AP and APIC policy for credit card numbers and sensitive documents policies. These policies have been enabled in Proofpoint Enterprise DLP to prevent data from leaving our organization. These policies, such as DLP policies for our devices, ensure that data cannot be copied from the company's hotel or company device to personal devices.

I have implemented policies where, for instance, if employees attempt to bypass sensitive document protections or any card-related or banking-related materials, the system intervenes. For example, if our finance team attempts to send financial documents to another team such as sales or any other department, we have enabled the policy for email encryption so the content cannot be transmitted between channels. Detection and prevention of data loss is very crucial and important in every organization, and I believe that Proofpoint Enterprise DLP has strong capability for this task.

The encryption feature is related to DLP offerings, and I believe that this is the best feature. The second feature is email encryption, which ensures the domain cannot be transmitted between channels. Nowadays, device compliance and device enrollment are also important.

The encryption feature is very valuable for us, ensuring that nothing can be intercepted between channels and preventing hackers from accessing our communications. These encryption features are truly helpful for our organization in day-to-day tasks.

As an infrastructure engineer and infrastructure architect, I can say that the features Proofpoint Enterprise DLP offers are quite comprehensive to meet our infrastructure requirements. Proofpoint Enterprise DLP database features help with file optimization, which eventually helps us provide validated data, reduce data leaks, and improve compliance. It captures most of our security requirements and what our infrastructure needs.

Governance and security are crucial elements. I assume it is similar to any other product where applications might include sandboxing. For instance, if we have a scenario to capture illegitimate IPs, those IPs are stored to AI agents, which I believe is very helpful for DLP AI capabilities. The system can block these IPs and help us automate our day-to-day tasks.

Adaptive policy enforcement has a very crucial role in setting policies in Proofpoint Enterprise DLP because these are the main features. This is a very important and effective feature platform because we can cover most infrastructure resources, whether they are in the cloud or not. I have experienced features required by enterprise infrastructure, so we will not need to purchase solutions from third parties or standalone solutions for utility equipment for infrastructure hygiene and compliance.

I cannot determine if there are any improvements needed at this time. I appreciate your response.

I cannot actually report any issues. It seems the product captures all the features and services that a company or infrastructure requires.

I do not believe there are any improvements needed right now.

I have been using Proofpoint Enterprise DLP for more than five years. I have experience with particular policies, and they are actually using different products for their infrastructure to provide secure and authorized environments. I had security experience in Proofpoint Enterprise DLP and their features.

Proofpoint Enterprise DLP is stable.

I would rate customer support as seven or eight.

I have additional thoughts about Proofpoint Enterprise DLP, as I feel that most of the features in that product are very comprehensive. I would rate this product eight out of ten overall.

Based on what I learned in the seminar, Proofpoint Enterprise DLP can be most useful in preventing sensitive data from leaving the organization. Now that they're integrating AI, I think that's a good step forward and it will help protect confidential information such as customer data and financial records for our bank by monitoring and controlling data shared through email. I feel this helps organizations reduce the risk of data breaches.

One specific example of how Proofpoint Enterprise DLP might help in my environment is if an employee accidentally emails a spreadsheet containing customer account details or financial information to the wrong person or recipient. It can detect sensitive data and block or warn before the email is sent.

Another scenario could be an insider threat, where an employee tries to upload confidential client lists or trading data to a personal cloud storage before leaving the company. Proofpoint Enterprise DLP can detect it and block the transfer.

The best features Proofpoint Enterprise DLP offers, based on what I heard in the seminar, are the AI-related features, which are really good. AI-powered data classification and AI to understand the context of the content automatically identifying sensitive information is excellent.

What stood out to me about the AI-powered data classification of Proofpoint Enterprise DLP is that it goes beyond traditional keyword matching or manually created rules. AI can actually understand the context and meaning of the data and help identify sensitive information more accurately. This can reduce false positives and improve user experience in general. It can be valuable, such as in our case, for protecting sensitive customer information or financial documents.

Proofpoint Enterprise DLP has helped me understand that data security is actually a balance between protection and productivity. Proofpoint's modern DLP solutions use AI and context-aware analysis to reduce risks. This made me appreciate the importance of having intelligent tools which will help the organization protect valuable information.

Proofpoint Enterprise DLP is really good overall, but I feel it can improve by making the policy management more intuitive. The AI and automation work they're doing is great, and if it were more intuitive, I think it will help security teams work more efficiently.

I would rate Proofpoint Enterprise DLP overall as a solid eight. I feel Proofpoint is good because it provides strong data protection and has AI-powered classification. I would not give it a ten because there is always room for improvement in areas such as making it more intuitive and increasing more automation to reduce administrative effort.

I have been working in my current field for about a year now.

I feel Proofpoint Enterprise DLP is pretty accurate and reliable. However, I haven't really used it, so I'm not certain I can answer this question comprehensively.

I think Proofpoint Enterprise DLP is highly scalable and can expand with organization growth, supporting more users, more data sources, and additional security requirements while maintaining centralized policy management and visibility.

Our DLP team uses Symantec DLP, though I have not used it since I work in IAM.

I'm not sure about my experience with pricing, setup cost, and licensing, as I haven't had the meeting regarding the pricing or licenses. I don't think I'm at a high enough level in management to answer this question. However, I think it should depend on the organization's size and number of users.

As I said, we don't use Proofpoint Enterprise DLP, so we haven't discussed alternate solutions yet.

I would assess the effectiveness of Proofpoint Enterprise DLP in detecting and preventing data loss through the analysis of user behavior and content by looking at metrics such as prevented data loss, detection accuracy, and false positives. I feel a successful DLP solution should reduce risk without negatively impacting employee productivity.

Proofpoint Enterprise DLP appears to have AI-based risky behavior monitoring in place because it shifts security from a reactive approach to a proactive one. If we identify unusual user activities and potential data risks early, then organizations can take action before sensitive information is compromised.

Organizations can benefit from Proofpoint Enterprise DLP as they can save time through automation. I'm not certain about the financial savings.

I'm sure Proofpoint Enterprise DLP is reliable. It appears to be reliable because it provides broad visibility and accurate detection. The reliability also depends on how well the organization configures policies and maintains the system over time.

If I were to give advice about using Proofpoint Enterprise DLP, I would recommend it with a clear understanding of what data is more sensitive and what the organization is expecting from the DLP policies. Organizations should use the AI insights and need to educate their employees.

One additional thought could be that the future of DLP will definitely depend heavily on AI, and solutions Proofpoint Enterprise DLP can help organizations move from simply reacting to data loss to actually proactively identifying and preventing risks. I rate this product an eight overall.

I work as a SOC cybersecurity analyst at EYGDS. We have different mailboxes for analyzing DLP cases, and we conduct investigations for any data leaks from the company or any emails that have been sent to a user's personal Gmail, Yahoo.com, or other personal email accounts. If any sensitive data of the company is shared to a user's personal email or leaked, we work on that and raise an incident.

In one of my recent alerts that I worked on, the user had sent some company sensitive data, specifically a document which should have been used internally. He had sent that to his personal email for his learning purpose, but it was a data leak. We took sufficient action for that user and conducted the whole analysis, including determining from where he had done it and at what timing. The user was first informed not to do this, and as per the severity of the case, the user has been removed from the company.

I have used Proofpoint Enterprise DLP three years back. It has saved many incidents from occurring as a result of data leaks of the organization, which is important for taking strict action. It saves risk and also the organization's time, and saving those incidents has positively impacted my team and the company.

I do not have anything to add about the needed improvements or anything that could make my experience better, even if it is a small thing.

It has been four years since I have been working in my current field.

It is not one hundred percent reliable, but I believe it is easy for saving time for the user regarding the accuracy and reliability of the AI output in Proofpoint Enterprise DLP.

We do not have a business relationship with this vendor other than being a customer.

I would not add anything else about the features I used, or about how it helped me with email investigations or managing incidents. I think Proofpoint Enterprise DLP's AI capabilities regarding governance and security are secure. I rate Proofpoint Enterprise DLP eight out of ten because it is saving the risk, meaning it is preventing the risk of the company getting a data leak, but there might be some drawback.